What is the recommended procedure to deal with an Expried factory default certificate?

RAI_Tech

The expired "default" cert is still referenced in the configuration in some places, so I can't just delete it.  Can the default be replaced with something better?  Does it need to have a "default" cert to function?  How do I recreate the factory default cert?  What is the best solution for the expired cert?  Thanks.

Jeremylin

As I know, you can go to system>www ,and check the default cert is used by Server Certificate field.
The certificate also can be used on VPN profile for authentication, so you may check it as well.